EXPOSURES › CVE-2021-30761
CVE-2021-30761
HIGH ⌖ ON CISA KEV · EXPLOITEDApple iOS WebKit memory corruption vulnerability allows remote code execution via malicious web content.
A memory corruption flaw in Apple iOS WebKit enables attackers to execute arbitrary code when processing malicious web pages, impacting Safari and other WebKit-based browsers. Defense contractors must ensure mobile devices used for classified work are patched and monitored, as this vulnerability was actively exploited in the wild and represents a significant compliance risk under NIST 800-171 for unpatched software.
Shame score — The vulnerability was actively exploited in the wild and linked to ransomware campaigns, demonstrating severe negligence in patching a critical memory corruption flaw that could be easily weaponized.
▸ RECOMMENDED ACTION Actively exploited (CISA KEV) — remediate now, ahead of your normal patch cycle.
Apple iOS WebKit contains a memory corruption vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.
"This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing."